Rujukan Laman

Privacy Policy – How We Handle Your Information

When you open an account with 4dsweep, we collect the information you give us during registration, every deposit you make through Touch 'n Go, GrabPay, Boost dan FPX…

Account registration dataPayment transaction recordsDevice and session logsYour rights to access and deletionContact channels for data requests
4dsweep Privacy Policy – How We Handle Your Information
PRIVACY CONTACT

How to Reach Us About Your Data

If you want to see what information we hold, update a detail that's changed, or ask us to delete records where the law allows it, our support team is ready to help. Use live chat for the fastest reply during business hours, send an email for detailed requests that need a paper trail, or check the account portal for a self-service download of your recent transaction and profile data.

Team online

Live Chat

Open the chat icon at the bottom right of any page and tell the agent you need help with a data request. Our team in Shah Alam responds within minutes during peak hours and will guide you through what we need to verify your identity before releasing or changing account information.

Email Support

Send your request to our privacy inbox with your registered email and account username. Include a clear description of what you want—access, correction, or deletion—and attach any supporting document if you're reporting an error. We'll reply within two business days and complete most requests within a week.

Account Portal

Log in to your account and navigate to the privacy section under settings. You can download a JSON file of your profile data, view recent deposits and withdrawals via Touch 'n Go, GrabPay, Boost dan FPX, and see which cookies are active on your browser. Update your email or phone number directly from that screen without contacting support.

DATA SAFEGUARDS

How We Protect and Manage Your Information

Your account password is hashed before it hits our database, so even our own team cannot read it in plain text.

Password Hashing

We use bcrypt with a cost factor high enough that brute-force attacks take years, not hours. When you reset your password, the old hash is overwritten immediately, and any active session tokens are revoked so previous logins cannot continue. You'll need to sign in again with the new password on every device.

Encrypted Transmission

Every page on 4dsweep runs over HTTPS with TLS, so your login credentials, deposit amounts via Touch 'n Go, GrabPay, Boost dan FPX, and session cookies are encrypted in transit. Network sniffers see only scrambled data, and your browser will warn you if the certificate ever fails validation.

Data Separation

Your email, phone, and birthdate live in one database; transaction logs in another. If an attacker compromises the payment ledger, they see amounts and timestamps but no personally identifiable details. This compartmentalisation limits the blast radius of any breach and helps us comply with local data-protection rules where they apply.

Session Timeout

After thirty minutes of inactivity, your session token expires and you'll need to log in again. This automatic logout prevents someone from accessing your account if you leave a device unattended. On mobile, you can enable biometric re-authentication for faster return without typing your password every time.

Anomaly Detection

Our system flags logins from new devices, sudden jumps in deposit size, or access attempts from regions far outside your usual pattern. When something looks off, we pause the session and send a verification code to your registered phone or email. Once you confirm it's you, the lock lifts and normal access resumes.

Retention and Deletion

Transaction records stay on file for the period required by local law where it applies; marketing profiles and behavioural logs are deleted ninety days after you close your account. If you want faster deletion of non-essential data, contact our support team with your request and we'll process it within two weeks, keeping only the legal minimum.

Privacy Policy Questions We Hear Most

Players ask us every day how long we keep their data, whether they can see everything we hold, and what happens to payment records when an account closes. Below are the answers to the questions that come up most often, written in plain language so you know exactly where you stand.

We ask for your email address, phone number, date of birth, and a username during sign-up. This lets us verify your age, send transaction confirmations, and contact you if there's unusual account activity. We also log your IP address and device type to detect multiple accounts or suspicious login patterns.

Every time you deposit or withdraw, we record the payment method, amount, timestamp, and transaction reference so we can reconcile your wallet balance and resolve disputes. We don't store your full bank account number or card details—those stay with the payment provider, and we see only a masked reference.

Yes. Log in to your account, go to the privacy section under settings, and click the download button. You'll get a JSON file with your profile details, transaction history, session logs, and cookie preferences. If you need help interpreting the file, contact support and we'll explain each field.

Transaction records and your account ID are archived for the period local law requires—typically several years—so we can respond to audits or disputes. Marketing profiles, session logs, and device fingerprints are deleted within ninety days of closure. If you want non-essential data removed sooner, email our privacy team with your request.

We use session cookies to keep you logged in, preference cookies to remember your language choice, and analytics cookies to see which pages get the most traffic. You can disable analytics cookies in your account settings without affecting login or wallet access. Essential session cookies cannot be turned off or the platform won't work.

Reach our support team via live chat for quick corrections like updating your phone number, or send an email to the privacy inbox for deletion requests. Include your registered email and username so we can verify your identity. Most requests are completed within a week; legal-hold data may take longer.

We share transaction details with the payment providers—Touch 'n Go, GrabPay, Boost dan FPX—so they can process deposits and withdrawals. We also pass anonymised usage statistics to analytics partners to improve the platform. We never sell your email, phone number, or betting history to marketing companies, and any sharing depends on local law where it applies.